4 Commits

Author	SHA1	Message	Date
Harshavardhana	f420996dfa	fix: allow parsing keys in both new and old format (#12144) ... Bonus fix fallback to decrypt previously encrypted content as well using older master key ciphertext format. Signed-off-by: Harshavardhana <harsha@minio.io>	2021-04-24 19:05:25 -07:00
Harshavardhana	069432566f	update license change for MinIO ... Signed-off-by: Harshavardhana <harsha@minio.io>	2021-04-23 11:58:53 -07:00
Andreas Auernhammer	3455f786fa	kms: encrypt IAM/config data with the KMS (#12041) ... This commit changes the config/IAM encryption process. Instead of encrypting config data (users, policies etc.) with the root credentials MinIO now encrypts this data with a KMS - if configured. Therefore, this PR moves the MinIO-KMS configuration (via env. variables) to a "top-level" configuration. The KMS configuration cannot be stored in the config file since it is used to decrypt the config file in the first place. As a consequence, this commit also removes support for Hashicorp Vault - which has been deprecated anyway. Signed-off-by: Andreas Auernhammer <aead@mail.de>	2021-04-22 09:51:09 -07:00
Andreas Auernhammer	885c170a64	introduce new package pkg/kms (#12019) ... This commit introduces a new package `pkg/kms`. It contains basic types and functions to interact with various KMS implementations. This commit also moves KMS-related code from `cmd/crypto` to `pkg/kms`. Now, it is possible to implement a KMS-based config data encryption in the `pkg/config` package.	2021-04-15 08:47:33 -07:00